admin/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2025-12-20 03:12:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor(core): Enforce authorization by default on all routes (no-changelog) (#8762)

Browse Source
This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™
2024-02-28 17:02:18 +01:00
committed by GitHub
parent 2811f77798
commit db4a419c8d
46 changed files with 126 additions and 299 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
packages/cli/test/integration/owner.api.test.ts
View File

@@ -1,5 +1,4 @@
import validator from 'validator';
import type { SuperAgentTest } from 'supertest';
import config from '@/config';
import type { User } from '@db/entities/User';
@@ -18,11 +17,9 @@ import Container from 'typedi';
const testServer = utils.setupTestServer({ endpointGroups: ['owner'] });
let ownerShell: User;
let authOwnerShellAgent: SuperAgentTest;
beforeEach(async () => {
ownerShell = await createUserShell('global:owner');
authOwnerShellAgent = testServer.authAgentFor(ownerShell);
config.set('userManagement.isInstanceOwnerSetUp', false);
});
@@ -39,7 +36,7 @@ describe('POST /owner/setup', () => {
password: randomValidPassword(),
};
const response = await authOwnerShellAgent.post('/owner/setup').send(newOwnerData);
const response = await testServer.authlessAgent.post('/owner/setup').send(newOwnerData);
expect(response.statusCode).toBe(200);
@@ -88,7 +85,7 @@ describe('POST /owner/setup', () => {
password: randomValidPassword(),
};
const response = await authOwnerShellAgent.post('/owner/setup').send(newOwnerData);
const response = await testServer.authlessAgent.post('/owner/setup').send(newOwnerData);
expect(response.statusCode).toBe(200);
@@ -150,7 +147,7 @@ describe('POST /owner/setup', () => {
test('should fail with invalid inputs', async () => {
for (const invalidPayload of INVALID_POST_OWNER_PAYLOADS) {
const response = await authOwnerShellAgent.post('/owner/setup').send(invalidPayload);
const response = await testServer.authlessAgent.post('/owner/setup').send(invalidPayload);
expect(response.statusCode).toBe(400);
}
});